8.4Yüksek
CVE-2019-25689HTML5 Video Player 1.2.5 Local Buffer Overflow Non-SEH
Açıklama
HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized key code string. Attackers can craft a malicious payload exceeding 997 bytes and paste it into the KEY CODE field in the Help Register dialog to trigger code execution and spawn a calculator process.
Zayıflık türü (CWE):
CWE-787
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| bplugins | html5 video player | 1.2.5 | |
| Html5Videoplayer | HTML5 Video Player | 1.2.5 | |
| socusoft | html5 video player | 1.2.5 |
Kaynaklar ve yamalar
- ExploitDB-46279 exploitExploitVDB Entry
- Official Product Homepage productProduct
- VulnCheck Advisory: HTML5 Video Player 1.2.5 Local Buffer Overflow Non-SEH third-party-advisoryThird Party Advisory
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:socusoft:html5_video_player:1.2.5:*:*:*:*:*:*:*